Personal Data Processing Policy
General Provisions
This Personal Data Processing Policy (“Policy”) outlines the procedures and principles applied by the Operator for handling personal data of website users in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). The Operator processes personal data as the data controller.
Categories of Personal Data Collected
The Operator may collect and process the following categories of personal data:
- Identification data (e.g., full name, date of birth, nationality)
- Contact details (e.g., address, email address, telephone number)
- Account information (e.g., username, unique user ID)
- Payment and transaction data
- Technical data (e.g., IP address, device identifiers, browser information)
- Verification documents, if required (e.g., copies of identification documents)
- Records of correspondence with the Operator
Purposes and Legal Bases for Processing
The Operator processes personal data for the following purposes, based on the corresponding legal grounds:
- To verify user identity and age – to comply with legal obligations.
- To fulfill contractual obligations for providing services – pursuant to performance of contract.
- To comply with anti-money laundering (AML) and responsible gambling requirements – in accordance with legal obligations.
- To communicate with users regarding the use of the website and services – based on the legitimate interests of the Operator.
- To detect and prevent fraudulent and prohibited activities – in fulfillment of legal obligations and legitimate interests.
- To retain records as required by laws and governing authorities – pursuant to legal compliance.
Methods and Principles of Processing
Personal data processing is carried out through automated and manual means, in accordance with the following principles:
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimisation
- Accuracy and up-to-date records
- Storage limitation
- Integrity and confidentiality (security)
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and in line with statutory requirements. Data retention periods may be extended as required by applicable laws or regulatory obligations.
Data Sharing and Disclosure
Personal data may be disclosed to:
- Regulatory authorities, as required by law
- Payment service providers and financial institutions involved in processing transactions
- Third-party suppliers performing services on behalf of the Operator (subject to data processing agreements)
- Law enforcement agencies, in accordance with applicable legal requirements
The Operator does not transfer personal data outside the United Kingdom, except where adequate safeguards exist as set out in UK GDPR.
Data Subject Rights
In accordance with UK GDPR, users have the following rights:
- Access: to obtain confirmation and access to their personal data
- Rectification: to request correction of inaccurate or incomplete data
- Erasure: to request the deletion of their personal data, subject to statutory limitations
- Restriction: to request limited processing of their data in certain circumstances
- Objection: to object to processing based on legitimate interests or direct marketing
- Portability: to receive their personal data in a structured format and transmit it to another controller
All requests regarding these rights should be sent to the Data Protection Officer using the contact details provided below. The Operator will respond within one month of receiving the request, subject to legal requirements.
Data Security
The Operator applies appropriate technical and organisational measures to ensure personal data is protected against unauthorised or unlawful processing, accidental loss, destruction, or damage. Measures include encryption, restricted access controls, and regular security assessments.
Complaints
Users have the right to lodge complaints regarding the processing of their personal data with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: +44 303 123 1113
Website: https://ico.org.uk/
Contact Information
For enquiries or to exercise your rights related to personal data processing, please contact the Data Protection Officer at:
Data Protection Officer
[Operator’s Registered Address]
United Kingdom
Email: [email protected]
Telephone: +44 20 7946 0991
Amendments
The Operator reserves the right to amend this Policy to ensure compliance with applicable laws and regulations. Any changes will be published on this website. Users are advised to review this Policy regularly.
Date of last revision: 11 June 2024